| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | ≤ 2.3.0 | |
| enterprise virtualization | = 3.0 | |
| openstack | = 4.0= 5.0= 6.0= 7.0 |
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free